# \#none **URL:** https://discuss.elastic.co/tag/none.md?page=1836 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1837 --- ## [Joda time vs Java Time in 6.8](https://discuss.elastic.co/t/joda-time-vs-java-time-in-6-8/203594)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 3\ **Last updated:** [October 17, 2019, 6:04am UTC](https://discuss.elastic.co/t/joda-time-vs-java-time-in-6-8/203594 "2019-10-17T06:04:52Z")
got a working 6.8 cluster ingesting data into indicies with templates that defines some date fields like this: "os\_installed": { "type": "date", "format": "MM/DD/YYYY||MM\\/DD\\/YYYY||MM\\\\/DD\\\\/YYYY||strict\_year… --- ## [org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/203995)
**Author:** [@aniq](https://discuss.elastic.co/u/aniq)\ **Replies:** 0\ **Last updated:** [October 17, 2019, 7:43am UTC](https://discuss.elastic.co/t/org-elasticsearch-bootstrap-startupexception-java-lang-illegalstateexception-failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/203995 "2019-10-17T07:43:14Z")
i am trying to unable RBAC in elasticsearch but when in enable it in elastic search cnfiguratin elasticsearch stops working follwing is the log file. \<\> at java.lang.reflect.Constructor.newInstance(Constructor.java:481)… --- ## [Trend charts problems](https://discuss.elastic.co/t/trend-charts-problems/202720)
**Author:** [@ahmed.louati](https://discuss.elastic.co/u/ahmed.louati)\ **Replies:** 2\ **Last updated:** [October 17, 2019, 7:22am UTC](https://discuss.elastic.co/t/trend-charts-problems/202720 "2019-10-17T07:22:43Z")
Hi Elastic, How can I use scripted fileld result but as a filter aggregation not as terms in trend charts. And can I filter the result by comparing it with a fix value ?? --- ## [Fscrawler not indexing the tif / tiff files in elastic search](https://discuss.elastic.co/t/fscrawler-not-indexing-the-tif-tiff-files-in-elastic-search/203294)
**Author:** [@shreyasht](https://discuss.elastic.co/u/shreyasht)\ **Replies:** 3\ **Last updated:** [October 17, 2019, 7:22am UTC](https://discuss.elastic.co/t/fscrawler-not-indexing-the-tif-tiff-files-in-elastic-search/203294 "2019-10-17T07:22:38Z")
fscrawler is not indexing the tif / tiff files in elastic search. I can see the meta data being indexed, but I cannot see the tiff file context in elastic search. Other than adding the jai jar in lib, do i need to do any… --- ## [Elasticsearch upgrading to 7.4.0 version](https://discuss.elastic.co/t/elasticsearch-upgrading-to-7-4-0-version/203991)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 1\ **Last updated:** [October 17, 2019, 7:21am UTC](https://discuss.elastic.co/t/elasticsearch-upgrading-to-7-4-0-version/203991 "2019-10-17T07:21:58Z")
Hi guys , i downloaded the latest version of elasticsearch(7.4.0) and my current verison is the 7.2.1 but my problem is i want to get all the data from and dashboards from the previous version to the new version . can y… --- ## [Reindexing a document of size \> 100mb](https://discuss.elastic.co/t/reindexing-a-document-of-size-100mb/203765)
**Author:** [@daso](https://discuss.elastic.co/u/daso)\ **Replies:** 2\ **Last updated:** [October 17, 2019, 7:10am UTC](https://discuss.elastic.co/t/reindexing-a-document-of-size-100mb/203765 "2019-10-17T07:10:30Z")
Hi, I am trying to do a remote reindex a document which is of size \>100mb but it is failing with the below exception error={type=illegal\_argument\_exception, reason=Remote responded with a chunk that was too large. Use … --- ## [Rename field names while Indexing a document](https://discuss.elastic.co/t/rename-field-names-while-indexing-a-document/203989)
**Author:** [@Revanth](https://discuss.elastic.co/u/Revanth)\ **Replies:** 0\ **Last updated:** [October 17, 2019, 7:09am UTC](https://discuss.elastic.co/t/rename-field-names-while-indexing-a-document/203989 "2019-10-17T07:09:07Z")
I have a JSON object with some of the fields like this:- { "desc": "this is test description", "name": "some random name", } While indexing this document, I would like to change the field names … --- ## [Not able to start data node for ES cluster](https://discuss.elastic.co/t/not-able-to-start-data-node-for-es-cluster/203986)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 0\ **Last updated:** [October 17, 2019, 6:57am UTC](https://discuss.elastic.co/t/not-able-to-start-data-node-for-es-cluster/203986 "2019-10-17T06:57:11Z")
Hello @dadoonet, Can you please help me in this? I am trying develop elasticsearch clustering using 2 servers. They both are different hosts. I want to create one data and one master node. Please find below Elasticsea… --- ## [GROK parsing totally different log lines](https://discuss.elastic.co/t/grok-parsing-totally-different-log-lines/203692)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 4\ **Last updated:** [October 17, 2019, 6:56am UTC](https://discuss.elastic.co/t/grok-parsing-totally-different-log-lines/203692 "2019-10-17T06:56:25Z")
Hey, I have following log lines: 111.222.3.11 - - \[15/Oct/2019:08:40:49 +0200\] "asaa /ssss/asf sss/saaa" 200 12833 "-" "sada(asd; fffff sff ff f asdasd) ssssss/6sadasf (ddddd, sssssss) ddd/sdasds/2222" 222.333.3.11 - -… --- ## [Curator 5.8.1 не удаляет индексы](https://discuss.elastic.co/t/curator-5-8-1/202850)
**Author:** [@artem33region](https://discuss.elastic.co/u/artem33region)\ **Replies:** 12\ **Last updated:** [October 17, 2019, 6:13am UTC](https://discuss.elastic.co/t/curator-5-8-1/202850 "2019-10-17T06:13:40Z")
Установил curator 5.8.1 создал конфиг, файл action: \> actions: \> 1: \> action: delete\_indices \> description: \>- \> Delete indices older than 60 days (based on index name). \> options: \> ignore\_emp… --- ## [BooleanQuery$TooManyClauses with synonym filter](https://discuss.elastic.co/t/booleanquery-toomanyclauses-with-synonym-filter/203636)
**Author:** [@tomoko](https://discuss.elastic.co/u/tomoko)\ **Replies:** 2\ **Last updated:** [October 17, 2019, 5:37am UTC](https://discuss.elastic.co/t/booleanquery-toomanyclauses-with-synonym-filter/203636 "2019-10-17T05:37:56Z")
How can I avoid TooManyCaluses failure when I use kuromoji tokenizer with the synonym filter with specifying synonym dictionary which contains about 500K words? How can I calculate to find an appropriate value as the max… --- ## [Elasticsearch high CPU Utilization](https://discuss.elastic.co/t/elasticsearch-high-cpu-utilization/203881)
**Author:** [@Jayabal\_K](https://discuss.elastic.co/u/Jayabal_K)\ **Replies:** 3\ **Last updated:** [October 17, 2019, 5:31am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-utilization/203881 "2019-10-17T05:31:50Z")
Hi, I have a elastic setup which consists of 5 datanode, 1 master and 1 client node. Each datanode consists of 1.5 vCPU, and 4GB Memory. My indexing rate is 10K logs per second. During the indexing time the CPU usage … --- ## [Can we able to visualize the data from Nagios to kibana](https://discuss.elastic.co/t/can-we-able-to-visualize-the-data-from-nagios-to-kibana/203866)
**Author:** [@anusree\_arun](https://discuss.elastic.co/u/anusree_arun)\ **Replies:** 3\ **Last updated:** [October 17, 2019, 5:30am UTC](https://discuss.elastic.co/t/can-we-able-to-visualize-the-data-from-nagios-to-kibana/203866 "2019-10-17T05:30:56Z")
We are using nagios as monitoring tool which contains several server activities.Can we visualize the same data to kibana --- ## [How does grouping\_key get assigned?](https://discuss.elastic.co/t/how-does-grouping-key-get-assigned/203959)
**Author:** [@ntavendale](https://discuss.elastic.co/u/ntavendale)\ **Replies:** 1\ **Last updated:** [October 17, 2019, 5:24am UTC](https://discuss.elastic.co/t/how-does-grouping-key-get-assigned/203959 "2019-10-17T05:24:19Z")
Have attempted to do my own assignment like so: {"error":{"id":"4367DBC77C9A6AE7","timestamp":1571282318000000,"trace\_id":"70C8BA2D755B5AE570DBA0807F14A684","transaction\_id":"5E3768BB0EF5FBAC","parent\_id":"5E3768BB0EF5F… --- ## [Kibana - Search frozen indices](https://discuss.elastic.co/t/kibana-search-frozen-indices/203773)
**Author:** [@hlamsc](https://discuss.elastic.co/u/hlamsc)\ **Replies:** 2\ **Last updated:** [October 17, 2019, 5:15am UTC](https://discuss.elastic.co/t/kibana-search-frozen-indices/203773 "2019-10-17T05:15:20Z")
Hello, we have an ILM policy that freezes and force merges indices older than 60 days. From time to time its possible that these indices are still needed for queries. Now we noticed that those frozen indices are not se… --- ## [The index pattern logstash1\* does not contain any of the following compatible field types: geo\_point](https://discuss.elastic.co/t/the-index-pattern-logstash1-does-not-contain-any-of-the-following-compatible-field-types-geo-point/203963)
**Author:** [@TheSun](https://discuss.elastic.co/u/TheSun)\ **Replies:** 0\ **Last updated:** [October 17, 2019, 4:10am UTC](https://discuss.elastic.co/t/the-index-pattern-logstash1-does-not-contain-any-of-the-following-compatible-field-types-geo-point/203963 "2019-10-17T04:10:02Z")
Hi, I am using logstash to process the data of 2 pfsense, I create 2 indexes pfsense1 and pfsense2. But when creating visualization on geo.location it reported an error: The index pattern pfsense1 \* does not contain any… --- ## [Disk-to-heap ratio for Frozen Indices?](https://discuss.elastic.co/t/disk-to-heap-ratio-for-frozen-indices/203945)
**Author:** [@jonusko](https://discuss.elastic.co/u/jonusko)\ **Replies:** 1\ **Last updated:** [October 17, 2019, 3:59am UTC](https://discuss.elastic.co/t/disk-to-heap-ratio-for-frozen-indices/203945 "2019-10-17T03:59:01Z")
The Elasticsearch documentation states... Because Elasticsearch does not maintain these transient data structures in memory, frozen indices consume much less heap than normal indices. This allows for a much higher disk… --- ## [How could I know when an index is change?](https://discuss.elastic.co/t/how-could-i-know-when-an-index-is-change/203957)
**Author:** [@Cherry\_Zhang](https://discuss.elastic.co/u/Cherry_Zhang)\ **Replies:** 0\ **Last updated:** [October 17, 2019, 3:00am UTC](https://discuss.elastic.co/t/how-could-i-know-when-an-index-is-change/203957 "2019-10-17T03:00:25Z")
I want to do something when an index is change, like, a doc is added, or a doc is deleted, or more precisely, I want to know the timestamp when something is changed in an index, is there a way to do that? --- ## [FilebeatからElastic Cloud接続時にエラー発生](https://discuss.elastic.co/t/filebeat-elastic-cloud/203956)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 0\ **Last updated:** [October 17, 2019, 2:48am UTC](https://discuss.elastic.co/t/filebeat-elastic-cloud/203956 "2019-10-17T02:48:50Z")
FilebeatからElastic Cloudへの接続設定をし、Filebeatを起動したところ、以下のエラーが発生しました。 Oct 17 11:31:20 XXXX filebeat: 2019-10-17T11:31:20.730+0900#011ERROR#011elasticsearch/elasticsearch.go:260#011Error connecting to Elasticsearch at https://… --- ## [Always get SIGTERM when starting Logstash with s3 output](https://discuss.elastic.co/t/always-get-sigterm-when-starting-logstash-with-s3-output/203331)
**Author:** [@Qingkun\_Li](https://discuss.elastic.co/u/Qingkun_Li)\ **Replies:** 1\ **Last updated:** [October 17, 2019, 12:56am UTC](https://discuss.elastic.co/t/always-get-sigterm-when-starting-logstash-with-s3-output/203331 "2019-10-17T00:56:27Z")
I use stable/logstash helm chart (chart version 2.3.0, app version 7.1.1) to deploy logstash. I have no issue using elasticsearch output, but always get SIGTERM with s3 output. I don't see any obvious cause of this in th… --- ## [Elasticsearch Cloud on Google - Security Accessing](https://discuss.elastic.co/t/elasticsearch-cloud-on-google-security-accessing/203666)
**Author:** [@Ocean12](https://discuss.elastic.co/u/Ocean12)\ **Replies:** 3\ **Last updated:** [October 17, 2019, 12:51am UTC](https://discuss.elastic.co/t/elasticsearch-cloud-on-google-security-accessing/203666 "2019-10-17T00:51:43Z")
Hi, first post and I'm not all that knowledgeable about this topic. Can anyone tell me the best way to use my ElasticSearch Google Cloud instance in terms of security? I have a mobile app that is being released as a P… --- ## [Consuming 3x 2GB text logs](https://discuss.elastic.co/t/consuming-3x-2gb-text-logs/203739)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 7\ **Last updated:** [October 16, 2019, 11:58pm UTC](https://discuss.elastic.co/t/consuming-3x-2gb-text-logs/203739 "2019-10-16T23:58:33Z")
so, I have this huge files. I tried using read mode file input, but nothing happened, I tried piping the content (like I've learned from @dadoonet over here https://www.elastic.co/pt/blog/enriching-your-postal-addresses-… --- ## [Cannot create user](https://discuss.elastic.co/t/cannot-create-user/203813)
**Author:** [@jepper](https://discuss.elastic.co/u/jepper)\ **Replies:** 2\ **Last updated:** [October 16, 2019, 11:17pm UTC](https://discuss.elastic.co/t/cannot-create-user/203813 "2019-10-16T23:17:59Z")
I post this, with xpack enabled and trial license curl -X POST "https://127.0.0.1:9200/\_xpack/security/role/demo\_admin" -u elastic:password -k -H "Content-Type: application/json" --data '{"indices": \[{"names": \[ "\*" \],"… --- ## [Pipeline aggregation to compute histogram of average values of a field, bucketed by term?](https://discuss.elastic.co/t/pipeline-aggregation-to-compute-histogram-of-average-values-of-a-field-bucketed-by-term/202273)
**Author:** [@Jonathan\_Rice](https://discuss.elastic.co/u/Jonathan_Rice)\ **Replies:** 11\ **Last updated:** [October 16, 2019, 10:25pm UTC](https://discuss.elastic.co/t/pipeline-aggregation-to-compute-histogram-of-average-values-of-a-field-bucketed-by-term/202273 "2019-10-16T22:25:24Z")
I'm trying to figure out how to compute a histogram of the average values of fields within "term" buckets. I think this is probably a case for a sibling aggregation, but I can't figure out the approach. For example, cons… --- ## [Creating Dashboards in Kibana through elastic rest client](https://discuss.elastic.co/t/creating-dashboards-in-kibana-through-elastic-rest-client/203757)
**Author:** [@prakhara](https://discuss.elastic.co/u/prakhara)\ **Replies:** 1\ **Last updated:** [October 16, 2019, 9:54pm UTC](https://discuss.elastic.co/t/creating-dashboards-in-kibana-through-elastic-rest-client/203757 "2019-10-16T21:54:10Z")
Hi , I want to create a new dashboard in kibana using java api, I tried by indexing as a document in .kibana index using elastic rest client but it is throwing error. Does anyone has a clue how it will be done, any gu… --- ## [Elasticsearch 7.4 won't start properly](https://discuss.elastic.co/t/elasticsearch-7-4-wont-start-properly/201891)
**Author:** [@phucvandinh](https://discuss.elastic.co/u/phucvandinh)\ **Replies:** 14\ **Last updated:** [October 16, 2019, 9:48pm UTC](https://discuss.elastic.co/t/elasticsearch-7-4-wont-start-properly/201891 "2019-10-16T21:48:17Z")
I have a problem after upgrade elasticsearch from 7.3 to 7.4 on my dedicated server, it won't be able to start ● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; ena… --- ## [Logstash only starts on 127.0.0.1](https://discuss.elastic.co/t/logstash-only-starts-on-127-0-0-1/203716)
**Author:** [@fabricioraphael](https://discuss.elastic.co/u/fabricioraphael)\ **Replies:** 7\ **Last updated:** [October 16, 2019, 9:45pm UTC](https://discuss.elastic.co/t/logstash-only-starts-on-127-0-0-1/203716 "2019-10-16T21:45:32Z")
I'am using Logstash 7.3 installed locally on server with: sudo apt-get update && sudo apt-get install logstash The goal is use filebeat to send logs to Elastic from Logstash but when I run Logstash, they starts on 127.… --- ## [Beats transport mechanisms](https://discuss.elastic.co/t/beats-transport-mechanisms/203924)
**Author:** [@arxo](https://discuss.elastic.co/u/arxo)\ **Replies:** 0\ **Last updated:** [October 16, 2019, 8:11pm UTC](https://discuss.elastic.co/t/beats-transport-mechanisms/203924 "2019-10-16T20:11:20Z")
I was wondering about deploying beats in a segregated network. Is there a way to send beats via HTTP or a simpler protocol than lumberjack (to allow it to pass via an inspection firewall/ASA) . On a side note is there a… --- ## [Syslog to filebeat or logstash](https://discuss.elastic.co/t/syslog-to-filebeat-or-logstash/203923)
**Author:** [@arxo](https://discuss.elastic.co/u/arxo)\ **Replies:** 0\ **Last updated:** [October 16, 2019, 7:55pm UTC](https://discuss.elastic.co/t/syslog-to-filebeat-or-logstash/203923 "2019-10-16T19:55:45Z")
Hi everyone, this might be a really obvious Q. If I have data coming in from syslog, if I push it via a filebeat with system plugins (receiving syslog), will it do the same thing as manually parsing values in logstash (g… --- ## [ElasticSearch index template from 6.8 to 7.4 need some help](https://discuss.elastic.co/t/elasticsearch-index-template-from-6-8-to-7-4-need-some-help/203907)
**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\ **Replies:** 1\ **Last updated:** [October 16, 2019, 6:49pm UTC](https://discuss.elastic.co/t/elasticsearch-index-template-from-6-8-to-7-4-need-some-help/203907 "2019-10-16T18:49:05Z")
Hello guys/girls, I am trying to upgrade from ElasticSearch 6.8 to 7.4 and need some help with my ElasticSearch index template. My current template { "template" : "logstash-\*", "version" : 60001, "settings" : { … [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1835) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1837)